Product Brief 


Nortel Networks 

Contlvfty 600 VPN Switch 

for branch offices and small businesses 

Service providers and enterprises have been quick to 
see the merits of IP (Internet protocol) virtual private 
network (VPN) services to connect multi-location 
enterprises and supply chains. 

Nortel Networks has led the customer-premises IP VPN 
market with a family of Contivity systems that support 
up to 5000 simultaneous tunnels. Now the power of 
Contivity VPN switches can be cost-effectively extended 
to connect small branch offices, multiple suppliers, 
distributors, and other business associates. 


The Contivity 600 YPN Switch is 

the perfect answer for branch offices 
and small businesses that need to be 
interconnected via managed IP VPNs. 

A single, compact unit provides rout¬ 
ing, firewall, bandwidth management, 
encryption, authentication, and data 
integrity for secure tunneling across 
managed IP networks and the Internet. 

Designed for small site VPN require¬ 
ments, the Contivity 600 supports up 
to 30 tunnels. With the same VPN 
features as the rest of the Contivity 
line, it is ideal for branch applications. 


Announcing the low-cost Contivity 600 VPN Switch, the 
secure solution for up to 30 tunnels—perfect for sites 
that are small in size but big in their need for security, 
reliability, and functionality. 
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When you need Contivity functionality but only for 30 or fewer tunnels, 
enjoy the security and performance of high-end Contivity systems— 
with the same software releases and management systems— 
in a low-cost package no bigger than a shoebox. 


Branch-to-branch VPNs are taking off 
in popularity, yet enterprises may have 
difficulty cost-justifying high-end VPN 
devices at their smaller locations. 
Similarly, a growing number of enter¬ 
prises have seen value in bringing out¬ 
side organizations—such as suppliers, 
distributors, and retail outlets—into 
their communication networks, but 
must look closely at the business case 
for multiple small sites, such as retail 
outlets. 

That’s where the Contivity 600 come 
in. As a standalone system, it’s the 
low-cost answer for these small 
intranet and extranet sites. Yet a# an 
integrated member of the Contivity 
family, the Contivity 600 offers a 
flexible range of configuration options 
for enterprises of all sizes. 


For example, medium to large busi¬ 
nesses can deploy the Contivity 600 as 
a small branch VPN solution connect¬ 
ing back to their headquarters-based 
Contivity 1500-series, Contivity 2600, 
or 4500 VPN switches. 

:ernatively, the Contivity 600 can 
form the basis of an extranet or small 
branch-to-branch intranet application 
using either a hub-and-spoke or small 
mesh configuration. 

In addition, the Contivity 600 can 
serve as an affordable headquarters 
solution for a small business, to 
provide remote access through secure, 
encrypted tunnels for up to 30 users. 


Sample application 

The Contivity 600, alone or with other 
Contivity models, offers so many net¬ 
working options that application possi¬ 
bilities are wide open. Let’s consider 
one typical application for a multi-site 
organization we’ll call Cash Profit & 
Associates. 

This hypothetical company, CPA, is a 
large financial firm that uses Contivity 
4500 VPN Switches in its corporate 
headquarters to support up to 5,000 
simultaneous tunnels. CPA’s larger 
regional offices are connected to the 
corporate virtual private network via 
Contivity 2600 switches (supporting up 
to 1000 simultaneous tunnels) and 
Contivity 1500-series switches (sup¬ 
porting up to 100 tunnels). 

That arrangement has worked well, 
providing reliable and secure transmis¬ 
sion for the company’s mission-critical 
and highly confidential data. 











































However, the company has been look¬ 
ing for an affordable way to bring 
smaller branch offices—those with 
fewer than 50 users—into the corpo¬ 
rate VPN. CPA wants the functionali¬ 
ty of the high-end Contivity systems, 
such as dynamic routing, packet filter¬ 
ing, and integrated management, but 
without having to deploy high-capacity 
systems for dozens of small offices. 

Here, the Contivity 600 system is ideal. 
These branch offices can install a 
Contivity 600 unit and connect via a 
10/100 auto-sensing Ethernet port to 
an xDSL, a cable modem, or to a 
router for secure, branch-to-branch 
connectivity. 


Full-featured Contivity 
performance in a low-cost, 
compact package 

Packaged in a compact, 4" high chas¬ 
sis, the Contivity 600 comes standard 
with two 10/100 auto-sensing 
Ethernet ports, 64 MB of memory 
(upgradable to 128 MB), and an 
external auto-sensing power supply. 

Status LEDs on the front panel enable 
quick monitoring of device condition. 
An expansion PCI slot provides for 
future growth options. 

Running on the standard release of 
Contivity server software, the 
Contivity 600 supports the same func¬ 
tions and capabilities as the rest of the 
product line, including: 

• tunneling (IPSec, PPTP, L2F, L2TP) 

• encryption (DES, 3DES, RC4) 

• authentication (LDAP, shared secret, 
X.509) 

• routing (RIP vl and v2) 

• RADIUS, RADIUS accounting, and 
Tokens 


What makes Contivity 600 
VPN Switch exceptional? 

Ease of deployment 
and management 

Like the larger members of the 
Contivity family, the Contivity 600 is 
easy to deploy at enterprise sites, sup¬ 
ports a wide range of interfaces, and 
interoperates with existing network 
components such as routers, firewalls, 
and servers. 

Secure directory-enabled 
networking 

The Contivity VPN Switch sends and 
receives traffic through authenticated, 
tunneled connections. All connections 
are encrypted for privacy, and all trans¬ 
actions are logged. 

Integrated security features 

To protect the security of VPN traffic, 
packet filtering is standard on the 
Contivity 600. Each user, group, or 
branch office connection—internal or 
external—can have a unique filtering 
profile with different access rights. 
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Technical specifications 


Contivity 600 


Up to 30 simultaneous users/tunnels 

Components 

Processing and memory: 

300 MHz Celeron A processor 
64 MB Memory 
1 PCI expansion slot 

Interfaces: 

Dual 10/100 Ethernet 
Software and documentation: 

Contivity 600 software 
CD and on-line HTML 
documentation 

Physical / 

Length: 11 in. (27.9cm) 

Width: 8.5 in. (21.6cm) 

Height: 4.0 in. (10.2cm) 

Weight: 6 lb (2.9 kg) 

Electrical: 90 VAC up to 240 VAC 
50-60 Hz 

Operating / 

Environment / 

Temperature: 32-131 °F- 
(0°C to 55°C) 

Relative humidity: 5%-85% 
noncondensing 
205 BTU/hour @ 240 VAC 

Customized service offerings 

Enterprises can choose to own and 
manage their own IP VPNs using 
Contivity systems—or outsource to a 
service provider while retaining control 
over user authentication or a part of 
the network, if they wish. 

Dynamic routing 

Whether serving as a small hub or 
branch-office remote device, Contivity 
600 systems use RIP vl and v2 routing 
protocols to dynamically create secure 
tunnels and to simplify provisioning. 


Versatile management options 

The versatile management options 
available throughout the Contivity 
product line extend to the new 
Contivity 600 platform: 

• An intuitive and powerful Web-based 
GUI (graphical user interface) for 
single platform configuration and 
status inquiry 

• SNMP (Simple Network 
Management Protocol) for statistics 

• Traps for event 

• Nortel Networks Preside system 
for integrated network management 
(Q2 2001) 

Standards-based technology 

Contivity VPN Switches are equipped 
for evolving VPN and extranet stan¬ 
dards, and provide a wide range of 
choices for tunneling, authentication, 
encryption, and accounting. 

In summary, if you’re looking to pro¬ 
vide robust, secure, and profitable 
VPN services for small locations— 
either for your own enterprise or to 
offer as a managed service—count on 
the Contivity 600 VPN Switch, work¬ 
ing alone or alongside other members 
of the proven Contivity family. 



For more information, contact your Nortel Networks representative, or 
call 1-800-4-NORTEL (1-800-466-7835) from anywhere in North America. 


The industry-leading 
Contivity family 

The Contivity 600 VPN switch is the 
newest entry in a complete, scalable 
product family that includes models 
for applications from home offices to 
large corporations: 

• The Contivity 4500, the premium 
offering in the Contivity family, 
provides secure, efficient VPN 
connectivity for up to 5000 tunnels. 

• The Contivity 2600 provides full- 
featured performance and security 
for locations that require up to 
1000 tunnels. 

• The Contivity 1500 series (1510, 
1520, and 1530) offers unusually 
flexible solutions for office centers, 
campuses, or branch offices need¬ 
ing up to 100 tunnels. 

• The cost-effective Contivity 600 
is targeted for branch offices 
requiring up to 30 simultaneous 
tunnels. 

• The economical Contivity 100 
provides basic branch connectivity 
for small offices and home offices 
requiring a limited number of 
simultaneous tunnels. 

This robust and easily managed 
technology made Nortel Networks 
the global leader in the VPN gateway 
market, according to a 1Q2000 
market analysis report from Synergy 
Research Group. 


www.nortelnetworks.com 
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